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AMENDMENTS TO THE CLAIMS 

1 . (Currently Amended) A method in a consumer system with a processor 
and a memory f or determining whether an application is misbehaving, the method 
comprising: 

when installing an application, 

establishing a limit on services of a service provider that the application is 
authorized to use based on published requirements of the 
application ; 

determining by the processor whether the applicatio n is authorized to 
request services of the service provider bv asking the service 
provider if the application is authorized to use the service provider, 
wherein the service provider determines that the application is not 
authorized based on notifications received from other consumer 
systems indicating that the application is misbehaving; 
when it is determined that the application is authorized to request services 

of the service provider, installing the application; and 
when it is determined that the application is not authoriz ed to request 
services of the service provider, not installing the application; and 
under control of_a runtime environment after the application ha s been installed, 
providing the application with access to the established limit; 
when the application requests a service of the service provider, 

determining bv the processor w hether the request would exceed 
the established limit that is based on published reguirements 
of the application ; 
when it is determined that the request would not exceed the 
established limit, requesting the service provider to provide 
the service; and 
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when it is determined that the request would exceed the 
established limit, 

notifying the service provider that the application is 

misbehaving; and 
prohibiting execution of the application on the consumer 

system. 

2. (Original) The method of claim 1 wherein the prohibiting includes 
uninstalling the application. 

3-4. (Canceled) 

5. (Original) The method of claim 1 wherein the service provider aggregates 
notifications provided by different consumer systems to determine whether the 
application should be authorized to request services of the service provider. 

6. (Original) The method of claim 1 wherein the service provider aggregates 
notifications provided by the consumer system to determine whether the consumer 
system should not be authorized to request services of the service provider. 

7-8. (Canceled) 

9. (Original) The method of claim 1 wherein multiple service providers can 
provide equivalent services and the application can requests services one of those 
service providers as designated by the consumer system. 



4 1 826-800 1 .US00/LEGAL 1 4954 1 1 2. 1 



3 



Application No. 10/789,805 

Reply to Office Action of September 17, 2008 



Docket No.: 418268001US 



10. (Currently Amended) A method in a computer system with a processor 
and a memory f or apprising a service provider when an application that uses services of 
a service provider is misbehaving, the method comprising: 

providing an indication of misbehavior for the application when the application 

requests services of the service provider ; and 
under control a runtime environment, 

when the application requests a service of the service provider, 

determining by the processor whether the application is behaving in 

accordance with the indication of the misbehavior; 
when it is determined that the application is not behaving in 
accordance with the indication of misbehavior, requesting 
the service provider to provide the service; and 
when it is determined that t he application behaves is behaving in 
accordance with the indication of misbehavior, 
notifying the service provider that the application is 
misbehaving so that the service provider can 
determine with the application is misbehaving and 
revoke authorization of the application to use the 
service provider ; and 
prohibiting execution of the application. 

1 1 . (Original) The method of claim 10 wherein the indication of misbehavior is 
exceeding a number of requests for services of the service provider. 

12. (Original) The method of claim 10 wherein the prohibiting includes 
uninstalling the application. 
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13. (Original) The method of claim 10 including before installing the 
application determining whether the application is authorized to request services of the 
service provider. 

14. (Original) The method of claim 10 wherein the service provider 
aggregates notifications provided by different consumer systems to determine whether 
the application should be authorized to request services of the service provider. 

15. (Original) The method of claim 10 wherein the service provider 
aggregates notifications provided by a consumer system to determine whether the 
consumer system should not be authorized to request services of the service provider. 

16. (Original) The method of claim 10 wherein the limit is established by a 
user of a consumer system. 

17. (Currently Amended) A method of a service provider for determining 
whether an application should not be authorized to request services of the service 
provider, the method being implemented bv a computer system with a processor and a 
memory, the method comprising: 

when service consumers determine that the application is misbehaving, receiving 
notifications of the misbehavior from the service consumers , wherein the 
application misbehaves when the application requests certain services of 
the service provider ; 

determining bv the processor w hether a condition of misbehavior is satisfied 
based on the received notifications from different consumers indicating 
that the application is misbehaving when executed bv the different 
consumers ; and 
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when a service request is received to provide services to the application and it is 
determined that the condition of misbehavior is satisfied, refusing to 
provide the requested service. 

18. (Original) The method of claim 17 wherein the condition of misbehavior is 
when multiple service consumers provide notifications that the application has 
attempted to exceed an established limit of requests for services from the service 
provider. 

19. (Original) The method of claim 17 including receiving from another 
service provider a notification that the application is misbehaving wherein the condition 
of misbehavior is satisfied based on the notification received from another service 
provider. 

20. (Original) The method of claim 17 including notifying service consumers 
that the application is not authorized to request services of the service provider. 

21. (Currently Amended) The method of claim 20 wherein a service 
consumer requests the service provider to indicate whether the application is 
authorized. 

22. (Original) The method of claim 17 wherein the condition of misbehavior is 
based on an aggregation of the service consumer notifications. 

23. (Currently Amended) A computer system with a processor and a memory 
for providing notification to a service provider that an application executing at a service 
consumer is misbehaving, t he m e thod comprising: 

a component that installs the application on the service consumer when a service 
provider indicates that the application has not bee n misbehaving an 
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indicated by notification received by other service consumers and 
establishes an indication of misbehavior for the application when the 
application requests services of the service provider ; and 
a runtime environment that requests the service provider to provide a service 
when the application requests a service of the service provide r and when 
the application does not behave in accordance with the established 
indication of misbehavior for the application , and that notifies the service 
provider that the application is misbehaving when the application behaves 
in accordance with the established indication of misbehavio r for the 
application . 

24. (Original) The computer system of claim 23 including prohibiting 
execution of the application when the application behaves in accordance with the 
indication of misbehavior. 

25. (Currently Amended) The method -computer system of claim 24 wherein 
the prohibiting includes uninstalling the application. 

26. (Original) The computer system of claim 23 wherein the indication of 
misbehavior is exceeding a number of requests for services of the service provider. 

27. (Original) The computer system of claim 23 including a component that, 
before installing the application, determines whether the application is authorized to 
request services of the service provider. 

28. (Original) The computer system of claim 23 wherein the service provider 
aggregates notifications provided by different consumer systems to determine whether 
the application should be authorized to request services of the service provider. 
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29. (Original) The computer system of claim 23 wherein the service provider 
aggregates notifications provided by a consumer system to determine whether the 
consumer system should not be authorized to request services of the service provider. 

30. (Original) The computer system of claim 23 wherein the limit is 
established by a user of a service consumer. 
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